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SOFTWARE SYSTEM WITH A BIOMETRIC DONGLE FUNCTION 



Background 

Software developers invest large sums of money in 
developing software^ and regain that investment from their sales 
of software. Pirating of software enables someone who has not 
paid for the software to use it without paying. This can become 
a huge loss of revenue for the software companies. 

The ability to pirate software is aided by technology. 
Many programs exist for copying CDs, even write protected CDs. 
Other programs and Internet sites are exclusively dedicated to 
finding ways to avoid any write protection or other pirate 
protection which is placed on a program. For example, certain 
Internet sites are dedicated exclusively to providing "crack" 
programs for time-limited versions of software. Other sites 
list authorized serial numbers for software. 

Copy protection mechanisms have been used for protecting 
software against unauthorized use. Many of these copy 
protection mechanisms make the program harder to use by 
authorized users, and are hence disfavored by the public. These 
copy protection mechanisms often prevent even the authorized 
user from adequately using their program. 

Many software manufacturers use at least some kind of 
security to attempt to ensure that the user of the program is in 
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fact authorized. High ticket programs often use a ^Mongle"^ 
which may be a physical connector with special encryption codes 
stored therein. The program cannot be used without the dongle 
being physically attached to the computer. 
5 Other systems require a long serial number to be entered. 

The program checks the serial number to determine if it meets a 
specified checksum condition. However^ since CDs are often made 
from molds^ the CDs which are produced are often precisely the 
same as each other CD that is produced. Therefore, any serial 
O 10 number that in fact correctly works on any program will work for 
'^^ all of the copies of the programs. Hence, as described above, 
l/i the serial numbers may be improperly distributed over the 

S Internet to thwart this security system. 

Lib Another technique has required the user to answer a 

15 question which could only be answered by someone who was in 
Q possession of the owners manual for the software. For example, 

the "Wolf enstein" program required an answer about what was 
listed on a specified page of the manual. This technique was so 
intrusive that actual owners of the software were often 
20 prevented from using the software. 

U.S. Patent No. 6,035,403 suggested personalizing a copy of 
software using a fingerprint reader at the point of sale. 
However, this required that the software media itself be 
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personalized. This may not be easily done, especially with read 
only media such as CDs and DVDs. 



Summary 

The present system teaches a technique of associating 
software with a user's personal details, and protecting software 
by using the user's personal details, e.g, by using a biometric 
f unction. 

The software is installed in a way that associates the 
software with specified biometric characteristics of a user. 
Thereafter, the software's use is limited based on those same 
biometric characteristics. The software can be installed in 
other computers based on the same biometric characteristics. 
However, use is limited based on the biometric characteristics. 



Brief Description of the Drawings 

These and other aspects will now be described in detail 
with reference to the accompanying drawings, were in: 

Figure 1 shows a block diagram of the hardware of the 
present system; 

Figure 2 shows a flowchart of verifying software according 
to the present system; 

Figure 3 shows a flowchart of installing software according 
to the present system; and 
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Figure 4 shows a flowchart of using software according to 
the present system. 



Detailed Description 
5 The present invention realizes that software companies may 

base their revenue model on the number of authorized users, 
rather than on the number of installations. Many software 
programs expressly authorize the user to install the program in 
more than one computer so long as the user does not use those 
O 10 multiple installations at the same time. In enterprise versions 
of software, a single version may be installed in multiple 



^ workstations, and the administrator may be required to determine 

license fees for the software. The present invention specifies 
,z individualizing each licensed software to a specified authorized 

15 person. That authorized person may be allowed to use the 
□ software on one or on multiple machines. 

The environment uses a hardware of the type generally shown 
in Figure 1. A computer 100 includes a user interface and other 
conventional computer parts. The computer also includes a 
20 plurality of ports and interfaces. One of the ports 105 is 

connected to a biometric reader 110 which can read a biometric 
feature, which can be any biometric feature. A common biometric 
reader may be a fingerprint reader, and hence that example is 
described in this specification. The computer also includes a 
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removable media reader including a first removable media reader 
115 which may be a CD reader, and a second removable media 120 
which may be a floppy disk or other read write media reader. 
The computer also runs an operating system shown as software 
5 layer 125, 

In operation, the system begins by installing a specified 
program at 200. As part of the installation routine, the user 
is asked for verification of the fact that they are an 
authorized user. This may use conventional means or one of the 
O 10 new means described herein. 

J"- A conventional way of verifying that the user is an 

authorized user, requires the user to enter a series of digits 
S at 205, e.g, a serial number or unlock code which is verified by 

the program. The verification can be based on specified 
15 criterion such as whether the series of digits meets a specified 
O checksum. 

Other alternative new ways of verifying whether the 
installer is in fact authorized are also described herein. A 
first way requires that the user have a bar-code scanning device 
20 130 attached to an installing computer. The bar-code scanning 
device may be connected to any desired port such as a USB port. 
Bar-code scanning device 130 is used to scan a specified bar- 
code from or associated with the packaging of the program. For 
example, the bar-code may be printed on the CD itself. In this 
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way, the original CD which is distributed with the program may 
be capable of scanning by a bar-code scanner. However, any 
copies of that CD will not have the bar code printed thereon, 
and hence not be similarly capable of being scanned. Therefore, 
5 installation can only be carried out when the original CD is 

present for scanning the bar code at 210. Backups of the CD can 
be made, and those backups can be used for program installation 
as long as the original CD is present. If the original CD is 
damaged, the backup can be used, but only if the original CD is 
□ 10 available for bar-code scanning. 

Another technique displays a specified pattern such as 
shown in 215 on or associated with the packaging of the program. 
S The pattern includes a series of lines, each line having a 

U number of associated with a vertex of the line. The pattern may 

U 15 be written for example on the box that accompanies the CD, or on 
D the packaging of the CD itself. A user puts the mouse over the 

lines and traces the lines. By following the positions on the 
pattern, information is entered which is matched to information 
stored within the program. 
20 Only a user who has this information can trace the pattern. 

Another optional technique, shown in 220, may be used by 
itself, or in combination with other techniques. This technique 
personalizes the software. 
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Many read only media cannot easily be made unique. For 
example, it is difficult to make uniquely identifiable CDs. 
Accordingly, this system uses all installation media, e.g., CDs, 
being the same, but packages the program with a separate unit 
which is individualized. Each individualized unit becomes the 
identity for that specified software. The individualized unit 
can be a floppy disk, a memory stick™ or any other type of 
readable and/or writable memory, or simply a single use code. 
The identity may allow a single install only and may prevent 
further installations after the first installation. If the code 
is on a read/write media, the code can be removed from the 
memory during the install, so that it cannot be used for another 
install. If the code is simply a number, the number is 
registered during installation, and cannot be used for a later 
installation. 

As described herein, this system however does not prevent 
other authorized installations as was the case with early copy 
protection software . 

Many of these systems may prevent or eliminate the usual 
technique of distributing codes over the Internet. For example, 
the bar-code scanning technique of 210 would require that the 
actual bar-code be distributed over the Internet, This may be 
relatively more difficult than distributing the code numbers. 
The vertex system of 215 may also require distributing an actual 
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image or instructions for following the pattern. This again is 
more difficult than distributing a numeric code. 

The installation generally follows the techniques in the 
flowchart of Figure 3. There are two basic ways to install the 
product in this system. One is a new install, which must follow 
the left-hand side part of the flowchart in Figure 3 described 
herein. However, once the product is installed in one computer, 
a sync install is allowed. 

The new install begins at 300, where a specified 
identification technique is followed, e.g., one of the ones 
shown in Figure 2, or any other. 310 generally determines if 
the system has passed or failed this technique. If there is a 
failure, then the system refuses to install the product much 
like in conventional products of this type. If the system passes 
at 310, then the user is prompted to enter biometric information 
at 320. The biometric information can be input through any 
reader attached to any port. This biometric information becomes 
the reference biometric information which will be used to 
determine execution of the program. The biometric information 
may be combined with a numeric indicia, which may be a random 
number, may be based on the CD code entered at 300, or the other 
unique code obtained at 300. This information is sent to a 
remote server at 330. 
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The example given herein assumes that the codes are unique 
codes. For example, each CD code which is entered at 300 is 
individualized to the CD and cannot be used for subsequent 
installation other than the single CD. Therefore^ even though 
5 all the CDs may be identical;, each of the codes effectively 
makes the CD unique. Similarly, the unique code obtained from 
the disk is unique to the single installation. Each code may 
represent a single license, for example. The server determines 
if the code has been used previously. If so, then an 

3 10 installation has already been carried out for that license, and 

^ at 340, the server refuses to return an authorization code. 

However, if the code has not been used previously, and is 

^ authorized, then the server returns an authorization code. The 

authorization code may be produced by the server using a one-way 
15 function. One example is the use of public key cryptography. 

3 The server may use its private key to encrypt a code that 

includes the reference biometric and the unique code at 350. 
The software, in operation, includes the public key 
corresponding to the private key that is used at 350. Hence, 
20 the software can decrypt the code and obtain the biometric 
information. However, neither the software, nor any other 
hacker who is not in possession of the private key, can produce 
an authorized code which includes the biometric code. 
Cryptographic programs which can encrypt using this kind of 
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encryption and can also verify whether the code is has been 
produced by an authorized key, are well-known. 

A hacker who obtains a code from someone else will be able 
to use that code as an authorized code. However, as described 
herein, the software will not operate properly unless biometric 
information is entered that meets the biometric information 
included as part of the code. 

The encrypted authorization code is included as part of an 
authentication layer for the software. The software uses its 
public key to decrypt the code each time or at specified times 
when the software is started. The information in the encrypted 
sequence is used to verify the biometrics. 

The sync install at 355 allows connection to the main 
computer, i.e. the one that first installed the program at 360. 
The connection can be via a remote connection techniques such as 
Ethernet, LapLink> PC anywhere, direct cable connection, phone 
line, or any other technique of this type. Specified 
information is obtained from the main computer at 365. This 
specified information is less than the entire installation. 
Only a relatively small amount of information needs to be 
transmitted over the remote connection. The specified 
information may include the encrypted authorization code with 
the biometric information. The computer may also return 
preference information such as recently worked-on documents, and 
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information about any way that the installation has been 
customized. 

At 370, the sub computer is allowed to install a new 
installation based on the information received from the main 
computer and based on the install disk(s) . That installation 
will use the encrypted sequence which is obtained from the main 
computer. The installation may also include the specified 
preferences from the main computer. 

Note that even though a new installation is carried out in 
this step, this new installation will still only be allowed for 
use by the owner of the biometric information. 

The above has described a single biometric key being an 
authorized key. However, it may be possible to provide multiple 
authorized biometric codes. Different versions of the program 
may be produced which are, for example, for family use. These 
versions of the program may allow multiple biometric items of 
information to be used so that the entire family can use the 
program. 

The operation of running the program is described herein 
with reference to Figure 4. The user requests the program to be 
run at 400, There are two different ways to run the program. A 
normal or unrestricted run requires that the biometric 

information be entered, and that the entered biometric 
information match to the reference biometric information that is 
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part of the encrypted sequence. A limited run, or exception, 
can allow the program to run in the specified way. The 
specified way can be a limited run, limited amount of time of 
running, or limited in some other way. 

The system first detects whether an exception is requested 
at 405. The exception may be allowed in specified 
circumstances, when the limits are detected to be ok at 407. 
For example, someone other than the registered user may be able 
to start the program under limited circumstances. One of these 
limited circumstances may be a limited-time run. For example, 
the program may be allowed to be started for a half -hour run. 
Another limit on circumstances may be the number of times that a 
non authorized run can be requested in a certain time, or in a 
row. One example which may be preferred is that no more than 
three in a row unauthorized starts may be allowed, and no more 
than two in any one 24-hour period. If the limits are detected 
to be OK at 407, then a run is allowed at 408. 

If no exception is requested at 405, the system next 
detects if a biometric reader is connected to a specified port 
at 410. If not, the program exits, and produces a message 
telling the user to connect a biometric reader to the port . 
If a reader is connected to the port at 410, the system monitors 
for data at 415. Data from the port is sent to the program. 
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At 420, the program begins running with an initial 
operation of decrypting the encrypted authorization code using 
the public key which is contained within the program. As part 
of the decryption, signatures are tested to make sure that the 
stream is an authorized stream from the authorized provider. 
The output data includes specified information including the 
biometric information . 

The biometric information from the decryption is compared 
against the currently-obtained information from the biometric 
reader connected to the port, at 425. This may use any 
conventional technique of comparing biometric information. For 
example, if the biometric information is fingerprint 
information, minutiae extraction may be used to monitor whether 
the fingerprint is authorized. If there is a match at 425, the 
program is allowed to run at 430. If not, the user may be 
allowed to run in exception mode at 435, or the user may be 
prompted to re-enter the biometric information. 

Different modifications are possible. In one modification, 
the user may be prompted to enter personal information when the 
biometric reader fails. This personal information can be a 
temporary way of starting the program, for example for use in 
difficult situations only. 

Moreover, other kinds of biometric information including 
face recognition, hand scanning, breath recognition, and retinal 
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scanning, as well as others, may be used as the identifying 
information. 

Another modification can include time and date information 
as part of both or either of the decrypted authorization 
information, and the read biometric information. The system 
compares the time and date stamp with the internal clocks and 
allows the program to run only if the time is recent, e.g., 
within a few minutes. In this way, the system ensures that the 
information is newly-read each time the program is started, 
preventing the program from being started using old data, e.g., 
cached data. 

This system can also be used with a hardware dongle, which 
can be a conventional dongle that connects to a port, or the 
special dongle described herein. Computers, e.g., PCs, PDAs and 
cell phones may include credit card readers. These credit card 
readers may be readers that read magnetic information, or may 
read electronic information from the credit card such as from a 
smart chip on the credit card or as described in our co-pending 
application serial number 09/690,074. According to this system, 
the encryption codes for the "dongle" may be written onto a 
credit card shaped device, and read from the card reader that is 
also adapted for reading credit card information. The 
encryption codes can be session codes only by including the 
current time and date as part of the code. Each run of the 
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program requires the encryption codes to be read from the card 
reader. Possession of the card therefore becomes necessary to 
run the program. 

The system operates in a similar way to that described 
above with respect to Figure 4, The system detects if the 
credit card reader or other information reader is connected to 
the port^ reads data from the port, decrypts certain data to 
detect if the data is authorized^ and if so allows the program 
to run. 

Although only a few embodiments have been disclosed in 
detail above^ other modifications are possible. In one 
modification^ this same technique may be used to control access 
to a computer. In this modification^ the authorized user of the 
computer goes through a similar startup procedure, obtaining an 
encrypted sequence which is stored in the BIOS. Subsequent 
initiations of the computer can only be carried out when a 
biometric reader is connected to a port and biometric 
information that is entered matches the information in the 
encrypted sequence . 

Ownership of the computer can be changed by contacting the 
manufacturer and obtaining new information, or by re flashing 
the bios. 

This system can also be used in a network environment. In 
the network environment, a copy of the software may be placed on 
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the network server. Any user can install the software in any 
workstation on the network. However^ only authorized users will 
be able to execute the program in anything other then an 
exception mode. This system may use multiple biometrics which 
are returned with the authorization code. Additional users can 
be added^ by indicating to the program server that additional 
users are desired^ paying the appropriate license fee, adding in 
their biometrics to the list of authorized biometrics. An 
update system can be used to maintain an updated list of 
authorized biometrics. 

In this network environment, any authorized user will be 
able to execute the program on any computer on the network. In 
an alternate embodiment, only the owner of the computer will be 
able to execute the specific copy of the software on the users 
specific computer. In addition, biometrics of system 
administrators and the like may be added so that the system 
administrator can operate the software on any computer. 

All such modifications are intended to be encompassed 
within the following claims, in which: 
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What is claimed is: 



1 1. A method^ comprising: 

2 storing encrypted information associated with a computer 

3 program; 

4 obtaining personal information as part of a startup 

5 sequence for said computer program; and 

6 reading said encrypted information^ decrypting information 
O 7 contained therein to obtain decrypted information, and comparing 
'^i 8 said personal information with said decrypted information; and 

9 allowing said computer program to run normally only if said 

!S 10 personal information agrees with said decrypted information in a 

11 specified way. 

pi 2. A method as in claim 1, wherein said personal 

2 information is biometric information, and said comparing 

3 comprises comparing said biometric information with other 

4 biometric information in said encrypted information 

1 3. A method as in claim 2, further comprising installing 

2 said computer program by entering a biometric code, sending said 

3 biometric code to a server, encrypting said biometric code at 
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said server and returning an encrypted sequence to said software 
as said encrypted information, 

4. A method as in claim 3, wherein said encrypting uses a 
private key at said server, and said decrypting verifies a 
signature of said private key. 

5. A method as in claim 3, wherein said encrypting uses a 
private key at said server, and said decrypting uses a public 
key included as a part of said computer program. 

6. A method as in claim 1, further comprising determining 
if a biometric reader is attached to a port, and wherein said 
program is only allowed to run if said biometric reader is 
attached to said port. 

7. A method as in claim 1, further comprising allowing the 
software to run in a limited exception mode without establishing 
that said personal information agrees with said decrypted 
information . 

8. A method, comprising: 

requesting a computer system to install a specified 
computer program; 
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determining whether said computer program is verified for 



5 installation; 

6 obtaining a reference biometric information from the 

7 authorized user; and 

8 thereafter allowing said program to run normally only when 

9 biometric information is obtained which matches said reference 
10 biometric information. 



1 9. A method as in claim 8 wherein said determining 

■3 2 comprises determining if the specified license has already been 
3 used for another installation. 



2 1 10. A method as 

i^, 2 specified unique code 

Ni 3 determines from a server whether said unique code has already 

O 4 been used for an installation. 



in claim 8 wherein said determining uses a 
that was distributed with the program, and 



1 11. A method as in claim 8, further comprising, after 

2 determining that said installation is authorized, sending said 

3 reference biometric information to a server. 



1 12. A method as in claim 11, further comprising, at the 

2 server, encrypting said reference biometric information, and 
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3 returning encrypted biometric reference information which is 

4 stored with said program, and which is used by said allowing. 

1 13. A method as in claim 8, wherein said allowing 

2 retrieves encrypted biometric information, decrypts said 

3 biometric information, and allows said program to run normally 

4 only if said decrypted biometric information matches a currently 

5 entered biometric information. 

C3 1 14. A method as in claim 12, wherein said reference 

2 biometric information is encrypted at said server using a 

5!1 3 private key of a public key-private key pair, and said reference 

53 4 biometric information is decrypted when software is to be run, 

m 5 using said public key corresponding to said private key. 

O 1 15. A system, comprising: 

2 in a computer, run an operating system, which includes an 

3 ability to run an associated program; 

4 at least one port, associated with said computer, said port 

5 capable of receiving at least one vertebral device thereon; and 

6 a user interface, associated with said computer, receiving 

7 a command to run a specified program, and operating to decrypt 

8 reference biometric information associated with said specified 

9 program, compare currently-obtained biometric information with 
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10 said reference biometric information, and allows said program to 

11 run in a specified way only when said currently-obtained 

12 biometric information matches said reference biometric 

13 information. 

1 16. A system as in claim 15, wherein said operating system 

2 operates to first detect whether a biometric reading device is 

3 attached to said port, and then detect whether biometric 

4 information has been received from said biometric reading 

O 5 device, said program being allowed to run in said specified way 

6 only when both said biometric reading device is attached, and 

Vz 7 biometric information which is received matches said reference 

^ 8 biometric information. 

^ 1 17. A system as in claim 15, wherein said operating system 

O 2 decrypts said reference biometric information. 

1 18. A system as in claim 17, wherein said operating system 

2 determines a time and current biometric information is obtained, 

3 and compares said time with the current time, and allows said 

4 program to run in in said specified way only when said time is 

5 within a specified interval of said current time. 
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19. A computer readable media, containing instructions 
causing the computer to: 

detect a request to run a specified program; 

obtain current biometric information; 

decrypt an encrypted reference information including 
reference biometric information therein^, and obtaining reference 
biometric information therefrom; 

compares said reference biometric information with said 
current biometric information; and 

allow said specified program to run into specified way only 
when said reference biometric information matches said current 
biometric information . 

20. Instructions as in claim 19, wherein said compares 
also compares a time and current biometric information was 
obtained with a current time, and allows said specified program 
to run in the specified way only man said time is within a 
specified interval of said current time. 

21. Instructions as in claim 19, wherein the specified way 
is an unrestricted run which does not detect a number of other 
executions or operations of said program. 
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ABSTRACT 

A program is installed by associating the program with an 
encrypted item of biometric information. The biometric 
information is encrypted using a private key on the server and 
associated with the program's execution file on the client. 
When the program is to be run, the encrypted biometric 
information is decrypted to obtain reference biometric 
information. That reference biometric information is compared 



w 



ith currently-obtained biometric information to detect a match. 



The program is allowed to run into specified and normal way only 
when the two indicia match. A limited to run may be allowed 
when the biometrics do not match. 
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Attorney's Docket No.: BIODONGLE/SCH 
COMBINED DECLARATION AND POWER OF ATTORNEY 

As a below named inventor, I hereby declare that: 

My residence, post office address and citizenship are as stated below next to my name, 

I believe I am the original, first and sole inventor (if only one name is listed below) or an original, first and 
joint inventor (if plural names are listed below) of the subject matter which is claimed and for which a patent is 
sought on the invention entitled SOFTWARE SYSTEM WITH A BIOMETRIC DONGLE FUNCTION the 
specification of which: 

[x] is attached hereto. 

[] was filed on as AppHcation Serial No. and was amended 

on . 

[] was described and claimed in PCT International Application No. filed on 

and as amended under PCT Article 19 on 



I hereby state that I have reviewed and understand the contents of the above-identified specification, 
including the claims, as amended by any amendment referred to above. 

I acknowledge the duty to disclose all information I know to be material to patentability in accordance with 
Title 37, Code of Federal Regulations, §1.56. 

I hereby claim the benefit under Title 35, United States Code, §1 19(e)(1) of any United States provisional 
application(s) hsted below: 

U.S. Serial No. Filing Date Status 



I hereby claim the benefit under Title 35, United States Code, §120 of any United States application(s) 
listed below and, insofar as the subject matter of each of the claims of this application is not disclosed in the prior 
United States application in the manner provided by the first paragraph of Title 35, United States Code, § 1 12, 1 
acknowledge the duty to disclose all information I know to be material to patentability as defined in Title 37, Code 
of Federal Regulations, § 1.56(a) which became available between the filing date of the prior application and the 
national or PCT international filing date of this application: 

U.S. Serial No. Filing Date Status 



I hereby claim foreign priority benefits under Title 35, United States Code, §119 of any foreign 
apphcation(s) for patent or inventor's certificate or of any PCT international application(s) designating at least one 
country other than the United States of America listed below and have also identified below any foreign application 
for patent or inventor's certificate or any PCT international application(s) designating at least one country other than 
the United States of America filed by me on the same subject matter having a filing date before that of the 
application(s) of which priority is claimed: 

Country Application No. Filing Date Priority Claimed 

[] Yes GNo 
[] Yes [] No 
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Combined Declaration and Power of Attorney 

Page 2 of 2 Pages 



Address all telephone calls to SCOTT C. HARRIS at telephone number (619) 823-7778. 

Address all correspondence to SCOTT C. HARRIS at: 

Customer No. 23844 

Scott C. Harris 

P.O. Box 927649 

San Diego, CA 92192-7649 

I hereby declare that all statements made herein of my own knowledge are true and that all statements 
made on information and belief are beheved to be true; and farther that these statements were made with the 
knowledge that willful false statements and the like so made are punishable by fme or imprisonment, or both, under 
Section 1001 of Title 18 of the United States Code and that such willful false statements may jeopardize the validity 
of the application or any patents issued thereon. 



Full Name of Inventor: Scott C. Harris 



Inventor's Signature: 
Residence Address: 





ndos, Rancho Santa Fe, CA 92067 



Date: ll/l^/^ Q 



Citizenship: 



USA 



Post Office Address: 



P.O. Box 927649. San Diego. CA 92192 



United States Patent & Trademark Office 
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